<?php

$config = array(
    /**
     * The lifetime of the authentication session.
     */
    'lifetime' => 3600,
    /**
     * The route where to unauthenticated requests will be redirected.
     */
    'loginRoute' => 'login',
    /**
     * The route that will clear the authentication session.
     */
    'logoutRoute' => 'logout',
    /**
     * The number max of failed login attempts until the account is locked.
     */
    'numberOfMaxFailedLoginAttempts' => 5,
    /**
     * If set to true, the default is to authenticate. Only the routes defined
     * with a true value in the routeAccess array below won't need
     * authentication. If set to false, only the routes defined with a false
     * value in the routeAccess array below will require authentication.
     */
    'defaultIsAuthenticate' => true,
    // Can be used to allow/deny access to specific routes. An example:
    // 'routeAccess' => array(
    //      'my/route/@id' => true,
    //      'my/route' => false
    // )
    'routeAccess' => array()
);

